Nigeria Data Protection Commission mandates registration for major data controllers after court ruling

The directive was issued by Babatunde Bamigboye, Head of Legal, Enforcement and Regulations at the NDPC, who called the ruling a significant milestone for data accountability. The judgment arose from a suit filed by Emmanuel Harunna against the NDPC, where the applicant challenged the designation of Point of Sale agents as Data Controllers or Processors of Major Importance. Justice F.N. Ogazi examined the commission’s Guidance Notice on Registration alongside sections of the Nigeria Data Protection Act, concluding that the NDPC acted within its powers.

The court stated that the registration framework safeguards the constitutional right to privacy by subjecting data controllers and processors to regulatory oversight. The NDPC described the decision as a significant boost to Nigeria's data protection regime. Following the ruling, NDPC National Commissioner and Chief Executive Officer, Vincent Olatunji, instructed all non-compliant entities to register without delay, warning of legal consequences for failure to comply.